nerdexam
Cisco

200-301 · Question #640

After a recent security breach and a RADIUS failure, an engineer must secure the console port of each enterprise router with a local username and password. Which configuration must the engineer apply

The correct answer is D. username localuser secret plaintextpassword. To secure the console port with local authentication using a username and password, one must first define the local user with the username command.

Submitted by deeparc· Mar 5, 2026Security Fundamentals

Question

After a recent security breach and a RADIUS failure, an engineer must secure the console port of each enterprise router with a local username and password. Which configuration must the engineer apply to accomplish this task?

Options

  • Aaaa new-model
  • Baaa new-model
  • Cusername localuser secret plaintextpassword
  • Dusername localuser secret plaintextpassword

How the community answered

(39 responses)
  • A
    8% (3)
  • B
    5% (2)
  • C
    15% (6)
  • D
    72% (28)

Why each option

To secure the console port with local authentication using a username and password, one must first define the local user with the `username` command.

Aaaa new-model

`aaa new-model` enables the AAA framework, but it does not directly create a local user or apply it to the console port in the most basic scenario.

Baaa new-model

`aaa new-model` enables the AAA framework, which is for more advanced authentication schemes, but it's not the direct command to create a local user for console access.

Cusername localuser secret plaintextpassword

This choice is identical to D, which is the correct answer.

Dusername localuser secret plaintextpasswordCorrect

The command `username localuser secret plaintextpassword` defines a local user account with a specified username and a *plaintext* secret password. This local user account can then be used for authentication on the console port by configuring `login local` under the `line console 0` interface.

Concept tested: Local user configuration for console access

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-3s/sec-usr-aaa-xe-3s-book/sec-usr-aaa-loc.html

Topics

#Cisco local authentication#Console port security#Router security

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice